for a mobile account being administered over a network by and OS X server does it need for the mobile account to be logged in for someone to be able to remotely access the computer? Also what firewalls and protections are necessary to avoid allowing the network administrators to access the computer? Thanks